Question Details

Payment Card Industry Data Security Standard (PCI DSS) 




1. Which U.S. law gives law enforcement organizations greater powers to
search telephone, e-mail, banking, and other records?
a. Patriot Act
b. Communications Assistance for Law Enforcement Act
c. Federal Information Security Management Act
d. Gramm-Leach-Bliley Act


2. The Payment Card Industry Data Security Standard (PCI DSS) requires
encryption of credit card in which circumstances:
a. Stored in databases, stored in flat files, and transmitted over public and
private networks
b. Stored in databases, and transmitted over public networks
c. Stored in databases, stored in flat files, and transmitted over
public networks
d. Stored in databases, and transmitted over public and private networks


3. A security incident as defined as:
a. Unauthorized entry
b. Exposure of sensitive information
c. Theft of sensitive information
d. Violation of security policy


4. The phases of a comprehensive security incident plan are:
a. Declaration, triage, investigation, analysis, containment, recovery,
debriefing
b. Investigation, analysis, containment, recovery, debriefing
c. Declaration, triage, containment, recovery, debriefing
d. Declaration, triage, investigation, analysis, documentation,
containment, recovery, debriefing


5. A security manager has discovered that sensitive information stored on
a server has been compromised. The organization is required by law to
notify law enforcement. What should the security manager do first to
preserve evidence on the server:
a. Disconnect power to the server
b. Back up the server
c. Shut down the server
d. Activate debug mode





Computer Science Assignment Help, Computer Science Homework help, Computer Science Study Help, Computer Science Course Help